CVE-2021-46243 Null dereference in n/a

Medium 6.5 Published 21 Jan 2022 Updated 4 Aug 2024

An untrusted pointer dereference in HDF5 allows attackers to cause a Denial of Service via crafted files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2021-46243?

CVE-2021-46243 is a medium-severity vulnerability in Hdfgroup Hdf5, published on 21 Jan 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS).

Weakness: CWE-476

Which versions are affected by CVE-2021-46243?

It affects 1 product.

Products include Hdfgroup Hdf5.

How do I fix CVE-2021-46243?

Upgrade to a fixed version.

Is CVE-2021-46243 being exploited?

There is no known exploitation of CVE-2021-46243 in the wild and no public exploit code.

All Hdfgroup Hdf5 vulnerabilities

Sources

Also known as DEBIAN-CVE-2021-46243, ECHO-106f-ca1d-e5c4, GHSA-2rqw-mg55-mp69, UBUNTU-CVE-2021-46243.